8667 matches found
Design/Logic Flaw
The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a username and password, or when the connection URL is not defined, allows remote attackers to bypass the security access policy and "send unauthorized messages to a protected...
CVE-2007-2701
The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a username and password, or when the connection URL is not defined, allows remote attackers to bypass the security access policy and "send unauthorized messages to a protected...
CVE-2007-2701
Technical details about CVE-2007-2701 are not publicly provided in the supplied documents. No concrete affected products, versions, or remediations are confirmed here. Monitor for updates as new information may emerge.
Fedora Core 5 : xorg-x11-server-1.0.1-9.fc5.7 (2007-424)
Sun Apr 8 2007 Adam Jackson 1.0.1-9.fc5.7 - xserver-CVE-2007-1003.patch: Fix CVE-2007-1003 in XC-MISC extension. - xorg-x11-server-1.0.1-intel-bridge-fix.patch: Backport an Intel PCI bridge fix from FC6. - Tue Jan 9 2007 Adam Jackson 1.0.1-9.fc5.6 - xorg-xserver-1.0.1-dbe-render.diff: CVE...
Code injection
Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges...
CVE-2007-1279
Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges...
CVE-2007-1279
CVE-2007-1279 affects the installer for Adobe Bridge 1.0.3 update on macOS. The vulnerability is described as a local privilege escalation during the installation process when patching with desktop management tools, enabling a local user to gain privileges via unspecified vectors during installat...
CVE-2007-1279
Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges...
Code injection
The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network topology map by using a MAC address that differs from the MAC address provided in the Real Source field of the LLTD BASE header of a HELLO packet, aka the "Spo...
CVE-2007-1528
The CVE-2007-1528 entry concerns the LLTD Mapper in Microsoft Windows Vista, where remote attackers can spoof hosts and nonexistent bridge relationships in the network topology map. This occurs by sending a HELLO packet whose LLTD BASE header Real Source MAC address differs from the MAC address p...
Fedora Core 5 : kernel-2.6.18-1.2257.fc5 (2006-1470)
This update rebases to 2.6.18.6rc2, which fixes the following security bugs : bridge: fix possible overflow in getfdbentries CVE-2006-5751 Bluetooth: Add packet size checks for CAPI messages CVE-2006-6106 In addition, a number of non-security related bugs have been fixed. Complete changelogs are...
Fedora Core 6 : kernel-2.6.18-1.2868.fc6 (2006-1471)
This update rebases to 2.6.18.6rc2, which fixes the following security bugs : bridge: fix possible overflow in getfdbentries CVE-2006-5751 Bluetooth: Add packet size checks for CAPI messages CVE-2006-6106 In addition, a number of non-security related bugs have been fixed. Complete changelogs are...
CVE-2006-6864
Technical details about CVE-2006-6864 are not publicly available in the provided documents. Monitor for updates in connected sources for affected product/version, impact, and remediation information.
CVE-2006-6863
CVE-2006-6863 describes a PHP remote file inclusion in the Enigma2.php file of the Enigma WordPress Bridge (Enigma2 plugin). The vulnerability allows remote code execution via a URL parameter in boarddir, but CVE notes indicate boarddir may be fixed, which affects exploitability. Multiple sources...
Enigma Coppermine Bridge E2_Header.Inc.PHP远程文件包含漏洞
Enigma WordPress Bridge是一款基于PHP的WEB应用程序。 Enigma WordPress Bridge不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'E2Header.Inc.PHP'脚本对用户提交的'boarddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Enigma WordPress Bridge 目前没有解决方案提供： http://www.lunabyte.org/index.php?module=Downloads;catd=4...
Enigma WordPress Bridge Enigma2.PHP远程文件包含漏洞
Enigma WordPress Bridge是一款基于PHP的WEB应用程序。 Enigma WordPress Bridge不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Enigma2.PHP'脚本对用户提交的'boarddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Enigma WordPress Bridge 目前没有解决方案提供： http://www.lunabyte.org/index.php?module=Downloads;catd=4...
enigmawp-rfi.txt
----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...
enigma-rfi.txt
----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...
CVE-2006-6863
PHP remote file inclusion vulnerability in the Enigma2 plugin Enigma2.php in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value...